Add optional automatic wg syncconf

[bryopsida]

As a user, it would be nice if when the wireguard configuration was updated, the wireguard pods did not need to be restarted for configuration updates to take effect. To that end something that watches the configuration and executes a wg syncconf would be nice. This needs to occur in the same process namespace as the wireguard process IE the wireguard container. It may require securityContext adjustments depending on if the command triggers sys calls that are not currently allowed in that container. It should be a behavior users can opt into but not change the current behavior.

Relates to: #68